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In the Claims 

1 . (Currently amended) A method for detection and correction of security vulnerabilities 
in a distributed computing environment, comprising: 

analyzing by a plurality of agents one or more software solutions to identify legal and 
illegal external interfaces thereto; 

attempting to access each of said one or more software solutions using the identified 
illegal external interfaces; and 

storing a record of any illegal external interfaces that allow access to said one or more 
software solutions at a plurality of databases associated with said plurality of agents, wherein for 
each of said one or more software solutions, at least one separate agent is utilized. 

2. (Currently amended) The method of claim 1 , wherein said one or more software 
solutions comprise[[s]] at least two independent software programs interacting to form said one 
or more soflAvare solutions. 



3. (Currently amended) The method of claim 1, further comprising: 
automatically deploying a corrective measvire to said one or more software solutions 
based upon said identified illegal external interfaces. 
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4. (Original) The method of claim 3, further comprising: 
storing each of said corrective measures in a memory. 

5. (Original) The method of claim 4, further comprising: 

making said stored record of illegal external interfaces that allow access, and said stored 
record of corrective measures available to all users of said detection and correction method, on a 
global basis. 

6. (Original) The method of claim 5, wherein said stored record of illegal external 
interfaces that allow access, and said stored record of corrective measures is made available on a 
global basis via a network connection. 

7. (Original) The method of claim 1 , wherein said analyzing step includes: 
analyzing an XML description of each legal and illegal external interface; and 
mapping each legal and illegal external interface into a machine-readable format. 

8. (Previously presented) A system for detection and correction of security vulnerabilities 
in a distributed computing envirormient, comprising: 

a processor configured to analyze, by a plurality of agents, one or more software solutions 
to identify legal and illegal external interfaces thereto; 
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means for attempting to access each of said one or more software solutions using the 
identified illegal external interfaces; and 

means for storing a record of any illegal external interfaces that allow access to said one 
or more software solutions at a plurality of databases associated with said plurality of agents, 
wherein for each of said one or more software solutions, at least one separate agent is utilized. 

9. (Currently amended) The system of claim 8, wherein said one or more software 
solutions comprise[[s]] at least two independent software programs interacting to form said one 
or more software solutions. 

10. (Currently amended) The system of claim 8, further comprising: 

means for automatically deploying a corrective measure to said one or more software 
solutions based upon said identified illegal external interfaces. 

11. (Original) The system of claim 10, fiarther comprising: means for storing each of said 
corrective measures in a memory. 

12. (Previously presented) The system of claim 11, further comprising: 

means for making said stored record of illegal external interfaces that allow access, and 
said stored record of corrective measures available to all users of said detection and correction 
system, on a global basis. 
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13. (Original) The system of claim 12, wherein said stored record of illegal external 

interfaces that allow access, and said stored record of conective measures is made available on a 

global basis via a network connection. 



14. (Original) The system of claim 8, wherein said analyzing means includes: 

means for analyzing an XML description of each legal and illegal external interface; and 
means for mapping each legal and illegal external interface into a machine-readable 

format. 

15. (Previously presented) A computer program product for detection and correction of 
security vulnerabilities in a distributed computing environment, the computer program product 
comprising a computer-readable storage medium having computer-readable program code 
embodied in the medium, the computer-readable program code comprising: 

computer-readable program code that analyzes one or more software solutions by a 
pltirality of agents to identify legal and illegal external interfaces thereto; 

computer-readable program code that attempts to access each of said one or more 
software solutions using the identified illegal external interfaces; and 

computer-readable program code that stores a record of any illegal external interfaces that 
allow access to said one or more software solutions at a plurality of databases associated with 
said plurality of agents, wherein for each of said one or more software solutions, at least one 
separate agent is utilized. 
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16. (Currently amended) The computer program product of claim 15, wherein said one or 
more software solutions comprise[[s]] at least two independent software programs interacting to 
form said one or more software solutions. 

17. (Currently amended) The computer program product of claim 15, fiurther comprising: 
computer-readable program code that automatically deploys a corrective measure to said 

one or more software solutions based upon said identified illegal external interfaces. 

18. (Original) The computer program product of claim 17, fiirther comprising: 
computer-readable program code that stores each of said corrective measures in a 

memory. 

19. (Previously presented) The computer program product of claim 18, fiirther 
comprising: 

computer-readable program code that makes said stored record of illegal external 
interfaces that allow access, and said stored record of corrective measures available to all users of 
said detection and correction computer program product, on a global basis. 



20. (Original) The computer program product of claim 19, wherein said stored record of 
illegal external interfaces that allow access, and said stored record of corrective measures is made 
available on a global basis via a network connection. 
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21. (Original) The computer program product of claim 15, wherein said computer- 
readable program code for analyzing the software solution includes: 

computer-readable program code that analyzes an XML description of each legal and 
illegal external interface; and 

computer-readable program code that maps each legal and illegal external interface into a 
machine-readable format. 



